WebKit/Source/bindings/templates/interface.cpp in Blink, as used in Google Chrome before 53.0.2785.113, does not prevent certain constructor calls, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted JavaScript code.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Sep 25, 2016 |
| Debian | — | Upgrade chromium-browser | Sep 15, 2016 | Sep 15, 2016 |
| Freebsd | — | Upgrade chromium-npapiUpgrade chromium-pulseUpgrade chromium | Nov 14, 2016 | Sep 16, 2016 |
| Gentoo Linux | — | Upgrade www-client/chromium. | Oct 30, 2017 | Sep 25, 2016 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Sep 28, 2016 | Sep 13, 2016 |
| Redhat_linux | — | Upgrade chromium-browserUpgrade chromium-browser-debuginfo | Oct 21, 2016 | Sep 16, 2016 |
| Suse | — | Upgrade chromiumUpgrade chromedriverUpgrade chromium-desktop-gnomeUpgrade chromium-ffmpegsumoUpgrade chromium-desktop-kde | Sep 15, 2016 | Sep 15, 2016 |
| Ubuntu | — | Upgrade liboxideqtcore0 | Oct 7, 2016 | Sep 25, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub